open-vault/builtin/logical/ssh
Alexander Scheel 3da261518b
Allow generation of other types of SSH CA keys (#14008)
* Add generation support for other SSH CA key types

This adds two new arguments to config/ca, mirroring the values of PKI
secrets engine but tailored towards SSH mounts. Key types are specified
as x/crypto/ssh KeyAlgo identifiers (e.g., ssh-rsa or ssh-ed25519)
and respect current defaults (ssh-rsa/4096). Key bits defaults to 0,
which for ssh-rsa then takes a value of 4096.

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Add documentation on key_type, key_bits for ssh/config/ca

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Add changelog

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
2022-02-15 14:14:05 -05:00
..
cmd/ssh Update to api 1.0.1 and sdk 0.1.8 2019-04-15 14:10:07 -04:00
backend.go Switch to go modules (#6585) 2019-04-13 03:44:06 -04:00
backend_test.go reformat using 'make fmt' (#13794) 2022-01-27 10:06:34 -08:00
communicator.go builtin: deprecate errwrap.Wrapf() throughout (#11430) 2021-04-22 11:20:59 -04:00
linux_install_script.go Use locking to avoid parallel script execution (#4358) 2018-04-23 18:04:22 -04:00
path_config_ca.go Allow generation of other types of SSH CA keys (#14008) 2022-02-15 14:14:05 -05:00
path_config_ca_test.go Allow generation of other types of SSH CA keys (#14008) 2022-02-15 14:14:05 -05:00
path_config_zeroaddress.go Migrate to sdk/internalshared libs in go-secure-stdlib (#12090) 2021-07-15 20:17:31 -04:00
path_creds_create.go builtin: deprecate errwrap.Wrapf() throughout (#11430) 2021-04-22 11:20:59 -04:00
path_fetch.go Switch to go modules (#6585) 2019-04-13 03:44:06 -04:00
path_keys.go Run a more strict formatter over the code (#11312) 2021-04-08 09:43:39 -07:00
path_lookup.go Run a more strict formatter over the code (#11312) 2021-04-08 09:43:39 -07:00
path_roles.go Fix PKI Weak Cryptographic Key Lenghths Warning (#12886) 2021-10-26 09:30:09 -04:00
path_sign.go reformat using 'make fmt' (#13794) 2022-01-27 10:06:34 -08:00
path_verify.go Run a more strict formatter over the code (#11312) 2021-04-08 09:43:39 -07:00
secret_dynamic_key.go builtin: deprecate errwrap.Wrapf() throughout (#11430) 2021-04-22 11:20:59 -04:00
secret_otp.go Run a more strict formatter over the code (#11312) 2021-04-08 09:43:39 -07:00
util.go Move to go 1.17 (#12868) 2021-10-21 09:32:03 -04:00